Tips for running cybersecurity audits